When the Cybersecurity & Infrastructure Security Agency (CISA) released the Secure Cloud Business applications (SCuBA) project, I was pretty excited but it left me wanting more. I wanted more enablement materials and a way to map this back to broader cybersecurity frameworks we are adopting vs just having a checklist to follow. For this reason, […]
In this article, I wanted to break down some of the trends in the Cyber Insurance market that I am seeing along with some predictions for 2023 and beyond. This is not a post I typically do but I have been fascinated by the rapid evolution we are seeing unfold so I wanted to share […]
CISA has recently released a project called SCuBA which is providing a security baseline for Microsoft 365. This project is currently in the alpha stages but there is a ton of great recommendations that span across the suite offerings like Azure AD, Exchange, Teams, Defender, OneDrive, SharePoint, and even Power Platform. If you are someone […]
MFA settings in Azure AD have evolved so much over the past few years and I believe that will continue at an even greater pace with the introduction of Microsoft Entra. I believe if you are a progressive MSP, you have moved your customers to licensing that supports Conditional Access over the legacy “per user” […]
In my previous blog post, I talked about the major considerations when adding roles for GDAP relationships. In some instances, you may want to bump up security a step further and pair GDAP with PIM or privileged identity management. This would allow you to have just in time access to customer workloads for users in […]
If you have been following along with my blog, you know I have written a few articles on Granular Delegated Admin Privileges or GDAP. If you are unfamiliar with what that is, please check out my first article, which is a high-level overview. One component of GDAP that may seem overwhelming is choosing the roles […]
This month, Microsoft had a technical release of GDAP or Granular Delegated Admin Privileges for M365 workloads (Azure coming later this year). If you checked out my previous article, you know that GDAP is going to replacing existing delegated admin relationships with a true model of least privilege access. GDAP is ultimately going to improve […]
Traditionally, both distributors (Microsoft Indirect Providers/CSP Tier 1s) and MSPs (Indirect Resellers) have established Delegated Admin Privileges (DAP) with all downstream customers. This allows distributors to license customer tenants and provide support. It allows you, as the MSP, to provide support and perform day to day management tasks via Partner Center. The large security concern […]
Recently, Microsoft has announced the introduction of granular delegated admin privileges, or GDAP, coming early 2022. These changes are coming to address supply chain attacks (like Nobelium). Traditionally, both distributors (Microsoft Indirect Providers/CSP Tier 1s) and MSPs (Indirect Resellers) have established Delegated Admin Privileges (DAP) with all downstream customers. This allows distributors to license customer […]
Recently, Microsoft has announced a fork of the Defender for Endpoint offering into two plans. Defender for Endpoint has traditionally been an enterprise grade solution and only included in higher level plans such as E5. Over the past few years Microsoft has made this a standalone offering that could be bolted on to other plans […]
Uploading 52% Purpose The purpose of this article is to explain Security Defaults and end of life for baseline policies. I give you recommended actions to take to replace these policies and how to manage security defaults for you customers in the future. Full Video Walk-through For those of you who need more of a visual. Highlights/Considerations Enforced February 29th, […]
We can leverage logic apps in Azure to build workflows across our 365 customers. This allows us to create triggers that cause other actions to take place. Recently, Microsoft introduced the Microsoft Graph API to our list of apps we can connect to. In this article we will primarily be focusing on the security components […]
